Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa
File:                     ACDAB45E592011EF976B8A1BC4F9AE02.roa (raw, json)
Hash identifier:          3A6hHhBFJticsvBrVaXGe9z0sMiy3/ZTX4PFh5eomQk=
Subject key identifier:   82:93:B2:B5:98:71:03:5E:35:34:47:50:B9:26:EA:48:AD:9E:3F:E7
Certificate issuer:       /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5
Certificate serial:       0166
Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa
Signing time:             Sun 07 Jun 2026 05:35:48 +0000
ROA not before:           Sun 07 Jun 2026 05:35:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133952
IP address blocks:        103.90.80.0/24 maxlen: 24
                          103.90.81.0/24 maxlen: 24
                          103.90.82.0/24 maxlen: 24
                          103.90.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl
                          rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A53A, serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5
        Validity
            Not Before: Jun  7 05:35:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a250334-17e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:02:f2:58:98:00:0b:cd:87:b0:a4:27:45:
                    5d:06:10:94:10:3a:66:05:a6:89:55:2b:b9:79:e9:
                    35:16:f4:3b:ce:30:ab:90:78:4c:2e:57:78:c2:c3:
                    17:8b:49:c0:1c:5e:51:94:35:f6:a4:71:bf:16:c3:
                    cf:32:fb:0d:be:86:91:5e:84:88:9f:79:12:31:17:
                    eb:01:75:a7:a5:c0:78:90:dc:b5:95:2b:21:f1:fd:
                    d0:bb:90:52:2e:6f:65:62:51:48:9a:05:52:20:75:
                    8a:c4:9d:e0:c9:d9:f0:f8:b1:76:12:02:e9:3c:54:
                    e9:dd:8e:c7:c7:77:6a:aa:a3:16:f5:82:82:9b:b3:
                    13:e1:40:46:c5:5f:93:93:79:0b:de:45:ec:d1:7d:
                    d3:84:e2:13:48:d5:0b:c9:1e:ee:6b:a8:1d:ae:e0:
                    16:c1:7c:cf:21:7c:68:15:49:44:bc:49:2f:6e:6b:
                    f2:a6:85:48:d9:c4:36:09:6b:88:a0:51:30:04:ec:
                    a4:b5:8d:35:98:33:7d:76:c0:c0:85:20:3c:03:66:
                    b3:e0:28:55:92:50:fd:0a:2f:e2:2f:f5:38:54:6b:
                    9e:4a:fd:f8:70:72:e6:54:be:8c:ef:a2:48:b3:41:
                    57:bb:3e:55:96:39:59:d7:cc:53:5a:30:cf:5c:45:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:93:B2:B5:98:71:03:5E:35:34:47:50:B9:26:EA:48:AD:9E:3F:E7
            X509v3 Authority Key Identifier:
                keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:db:cd:b9:f4:c6:35:1b:52:50:7b:eb:9d:19:dd:ca:fa:24:
         c4:ab:2f:16:2b:60:98:58:fc:77:da:47:e3:66:ed:96:db:b9:
         2d:92:d5:30:c6:73:6c:4b:a3:b7:f4:a6:5a:15:05:db:aa:7d:
         27:2e:73:17:3a:04:87:3f:9e:cf:6f:53:2b:3a:b3:05:67:15:
         7d:5a:f1:7f:e1:1f:10:9d:73:58:60:33:1f:b2:10:79:a2:1f:
         f1:07:15:86:b2:e4:c9:f1:8f:50:33:9d:17:0a:b9:14:16:35:
         9f:f2:15:2e:e1:a8:29:22:3c:1a:06:50:a6:cb:58:f9:28:f9:
         74:46:f1:0f:4a:9d:39:3d:3f:1a:ec:1c:8c:1e:5b:53:05:15:
         7c:99:fc:3b:73:95:9a:0e:f2:4f:46:40:bc:fa:c0:fb:22:b6:
         47:4e:3f:8e:7f:eb:cf:7e:98:90:62:72:2b:95:6e:35:d5:bf:
         e3:e8:9b:db:43:f3:23:e2:4c:22:7b:74:a4:a1:1e:55:39:77:
         d3:5d:77:1f:9e:0b:c8:0a:0e:19:d0:a8:f1:08:3a:72:4a:ef:
         ae:de:21:4b:1e:7a:24:9d:f4:38:70:3b:9c:48:86:81:2a:d4:
         02:03:74:80:01:15:59:a0:0e:6b:81:c5:6b:7c:55:78:70:98:
         e2:72:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:55:32 2026 by rpki-client